ZyXEL Communications ISDN 202H Plus User manual

Prestige 202H Plus
ISDN Internet Access Router
Quick Start Guide
Version 3.40
12/2004

Prestige 202H Plus Quick Start Guide
2
Table of Contents
1 Introducing the Prestige...............................................................................................................................................3
2 Hardware Installation ..................................................................................................................................................4
2.1 Rear Panel ..............................................................................................................................................................4
2.2 The Front Panel LEDs ............................................................................................................................................4
3 Setting Up Your Computer’s IP Address ...................................................................................................................5
3.1 Windows 95/98/Me..................................................................................................................................................6
3.2 Verifying Your Computer’s IP Address...................................................................................................................8
3.3 Windows 2000/NT/XP .............................................................................................................................................8
3.4 Checking/Updating Your Computer’s IP Address...................................................................................................9
4 Configuring Your Prestige.........................................................................................................................................10
4.1 Accessing Your Prestige Via Web Configurator ...................................................................................................10
4.2 Common Screen Command Buttons ......................................................................................................................12
4.3 Using the Wizard to Configure for Internet Access...............................................................................................12
4.4 Test Your Internet Connection ..............................................................................................................................16
5 Advanced Configuration............................................................................................................................................16
5.1 Network Address Translation Overview................................................................................................................16
5.2 Configuring SUA Server .......................................................................................................................................16
5.3 Firewall Overview.................................................................................................................................................18
5.4 Enabling the Firewall ...........................................................................................................................................19
5.5 Procedure for Configuring Firewall Rules ...........................................................................................................19
5.6 Configuring Source and Destination Addresses....................................................................................................23
6 Troubleshooting..........................................................................................................................................................24

Prestige 202H Plus Quick Start Guide
3
1 Introducing the Prestige
The Prestige 202HPlus is an ISDNInternetaccessrouter that offers a complete Internet accesssolution.
The prestige is equipped with two integrated phone ports for connecting analog phones and fax devices. It also provides
advanced calling features, such as call waiting, three-way calling, call transferring and forwarding.
Byintegrating NAT, firewall, VPN capability and a four-port switch, the Prestige 202H Plus is a complete security
solution that protects your Intranet and efficiently manages data traffic on your network.
You should have an Internet account already set up and have been given most of the following information.
INTERNET ACCOUNT INFORMATION
Your device’s WAN IP Address (if given): __________________
DNS Server IP Address (if given): Primary __________________, Secondary _________________
Your ISDN Phone Number: ________________________________
ISP Name: __________________________________________
ISP Telephone Number: ___________________________________
Login Name: ___________________________________
Password: ___________________________________
DNS Server Address(es): ___________________________________
Certifications
1. Go to www.zyxel.com
2. Select your product from the drop-down list box on the ZyXEL home page to go to that product's page.
3. Select the certification you wish to view from this page.

Prestige 202H Plus Quick Start Guide
4
2 Hardware Installation
2.1 Rear Panel
LABEL DESCRIPTION
ON/OFF Turn the router on and off by pushing the power button (in is ON, out is OFF).
POWER 12VAC Connect to a power source using the power adapter for your region (see your User’s Guide).
LAN 1-4 Connect to computer(s) / external hub(s) using an Ethernet cable. The LAN ports are auto-
crossover, which means either a crossover or straight-through Ethernet cable will do in either
case.
CONSOLE Connect the male end of the console cable to the console port of the router and the female end to
a serial port (COM1, COM2 or other COM port) of your computer.
ISDN Connect the router to the ISDN network using the included ISDN cable. Plug one end of the cable
into the port labeled ISDN and the other to the ISDN wall jack.
PHONE 1-2 Connect your analog phone devices to these ports via R-J11 cables.
2.2 The Front Panel LEDs
Turn on the Prestige by pressing the ON/OFF button.
The PWR/SYS LED blinks green while performing a system test and then stays on steady green if the testing is
successful. If the router senses a low voltage power supply, the PWR/SYS LED turns on steady red. The LAN,and
ISDN LEDs turn on if they are properly connected.

Prestige 202H Plus Quick Start Guide
5
LED COLOR STATUS DESCRIPTION
On The Prestige is receiving power and functioning properly.Green
Blinking The Prestige is rebooting.
Red On Power to the Prestige is too low.
PWR/SYS
Off The system is not ready or has malfunctioned.
Green On The Prestige has a successful 10Mb Ethernet connection.
Blinking The Prestige is sending/receiving data.
LAN 1-4
Amber On The Prestige has a successful 100Mb Ethernet connection.
On The ISDN link is connected to an ISDN switch and ready to send or receive
data.
ISDN LNK Green
Off The ISDN link is not connected to an ISDN switch or has not yet initialized.
On The ISDN B1(B2) line is sending or receiving data.ISDN B1, B2 Green
Off The ISDN B1(B2) line is not sending or receiving data..
On The telephone(s) connected to this port is (are) in use.
Blinking The telephone(s) connected to this port is (are) ringing.
Phone 1-2 Green
Off The telephone(s) connected to this port is (are) not in use.
3 Setting Up Your Computer’s IP Address
Skip this section if your computer is already set up to accept a dynamic IP address. This is
the default for most new computers.
The Prestige is already set up to assign your computer an IP address. Use this section to set up your computer to receive
an IP address or assign it a static IP address in the 192.168.1.2 to 192.168.1.254 range with a subnet mask of
255.255.255.0. This is necessary to ensure that your computer can communicate with your Prestige.
Your computer must have an Ethernet card and TCP/IP installed. TCP/IP should already be installed on computers
using Windows NT/2000/XP, Macintosh OS 7 and later operating systems.

Prestige 202H Plus Quick Start Guide
6
3.1 Windows 95/98/Me
Click Start, Settings, Control Panel and double-click the Network icon to
open the Network window.
The Network window Configuration tab displays a list of installed components. You need a network adapter, the
TCP/IP protocol and Client for Microsoft Networks.
If you need the adapter:
a. In the Network window, click Add.
b. Select Adapter and then click Add.
c. Select the manufacturer and model of your network adapter and then click OK.
If you need TCP/IP:
a. In the Network window, click Add.
b. Select Protocol and then click Add.
c. Select Microsoft from the list of manufacturers.
d. Select TCP/IP from the list of network protocols and then click OK.
If you need Client for Microsoft Networks:
a. Click Add.
b. Select Client and then click Add.
c. Select Microsoft from the list of manufacturers.
d. Select Client for Microsoft Networks from the list of network clients and then click OK.

Prestige 202H Plus Quick Start Guide
7
e. Restart your computer so the changes you made take effect.
In the Network window Configuration tab, select your network adapter's TCP/IP entry and click Properties.
1. Click the IP Address tab.
-If your IP address is dynamic, select Obtain an IP
address automatically.
-If you have a static IP address, select Specify an IP
address and type your information into the IP
Address and Subnet Mask fields.
2. Click the DNS Configuration tab.
-If you do not know your DNS information, select
Disable DNS.
-If you know your DNS information, select Enable
DNS and type the information in the fields below (you
may not need to fill them all in).

Prestige 202H Plus Quick Start Guide
8
3. Click the Gateway tab.
-If you do not know your gateway’s IP address,
remove previously installed gateways.
-If you have a gateway IP address, type it in the New
gateway field and click Add.
4. Click OK to save and close the TCP/IP Properties window.
5. Click OK to close the Network window. Insert the Windows CD if prompted.
6. Turn on your Prestige and restart your computer when prompted.
3.2 Verifying Your Computer’s IP Address
1. Click Start and then Run.
2. In the Run window, type "winipcfg" and then click OK to open the IP Configuration window.
3. Select your network adapter. You should see your computer's IP address, subnet mask and default gateway.
3.3 Windows 2000/NT/XP
1. In Windows XP, click start, Control Panel. In Windows 2000/NT, click Start, Settings, Control Panel.
2. In Windows XP, click Network Connections.
In Windows 2000/NT, click Network and Dial-up Connections.
3. Right-click Local Area Connection and then click Properties.
4. Select Internet Protocol (TCP/IP) (under the General tab in Win XP) and click Properties.

Prestige 202H Plus Quick Start Guide
9
5. The Internet Protocol TCP/IP Properties screen opens (the
General tab in Windows XP).
- To have your computer assigned a dynamic IP address, click
Obtain an IP address automatically.
If you know your DNS sever IP address(es), type them in the
Preferred DNS server and/or Alternate DNS server fields.
-To configure a static IP address, click Use the following IP
Address and fill in the IP address (choose one
from192.168.1.2 to 192.168.1.254), Subnet mask
(255.255.255.0), and Default gateway (192.168.1.1) fields.
Then enter your DNS server IP address(es) in the Preferred
DNS server and/or Alternate DNS server fields.
If you have more than two DNS servers, click Advanced, the
DNS tab and then configure them using Add.
6. Click Advanced. Remove any previously installed gateways in
the IP Settings tab and click OK to go back to the Internet
Protocol TCP/IP Properties screen.
7. Click OK to close the Internet Protocol (TCP/IP) Properties
window.
8. Click OK to close the Local Area Connection Properties
window.
3.4 Checking/Updating Your Computer’s IP Address
1. In the computer, click Start, (All) Programs, Accessories and then Command Prompt.
2. In the Command Prompt window, type "ipconfig" and then press ENTER to verify that your computer’s IP address
is in the correct range (192.168.1.2 to 192.168.1.254) with subnet mask 255.255.255.0. This is necessary in order
to communicate with the Prestige.
Refer to your User’s Guide for detailed IP address configuration for other Windows and Macintosh computer operating
systems.

Prestige 202H Plus Quick Start Guide
10
4 Configuring Your Prestige
Choose one of these methods to access and configure the Prestige. This Quick Start
Guide shows you how to use the web configurator wizard only. See your User’s Guide for
background information on all Prestige features and SMT configuration. Click the web
configurator online help for screen-specific web help.
 Web Configurator
 SMT (System Management Terminal). Access the SMT via:
o Console port using terminal emulation software
o LAN or WAN using Telnet
4.1 Accessing Your Prestige Via Web Configurator
1. Launch your web browser. Enter “192.168.1.1” as the web site address.
2. Type the password (“1234” is the default), then click OK to proceed to the next screen. In some versions, the
default password appears automatically - if this is the case, click Login.
3. It is highly recommended you change the default password. Enter a new password, retype it to confirm and click
Apply; alternatively click Ignore if you do not want to change the password now
Web site address.
Default password.

Prestige 202H Plus Quick Start Guide
11
If you do not change the password, the following screen appears every time you log in.
4. You should now see the Site Map screen.
 Click Wizard Setup to begin a series of screens to help you configure your Prestige for the first time.
 Click a link under Advanced Setup in the navigation panel to configure advanced Prestige features, such as
Password setup, WAN and LAN settings, NAT, Dynamic DNS, Firewall, and VPN.
 Click MAINTENANCE in the navigation panel to see Prestige performance statistics, upload firmware and
back up, restore or upload a configuration file.
 Click LOGOUT when you have finished a Prestige management session. The Prestige automatically logs
you out if it is left idle for five minutes; press ENTER to display the Login screen again and then log back
in.
WIZARD SETUP
NAVIGATION PANEL
LOGOUT

Prestige 202H Plus Quick Start Guide
12
4.2 Common Screen Command Buttons
The following table shows common command buttons found on many web configurator screens.
Back Click Back to return to the previous screen.
Apply Click Apply to save your changes back to the Prestige.
Reset/Cancel Click Reset or Cancel to begin configuring this screen afresh.
4.3 Using the Wizard to Configure for Internet Access
1. Click Wizard Setup in the main menu to display the first wizard screen.
Select B Channel Usage from the
dropdown box.
In general, this will be Switch/Switch
(default). If you are only using one B
channel (e.g., your router is sharing
the ISDN line with another device),
then select Switch/Unused. If your
second B channel is a leased line,
select Switch/Leased.
In ISDN Data, enter the phone number
(up to 25 digits) assigned to you by
your ISDN service provider. If it’s
necessary to dial an additional number
to reach an outside line, enter it in the
Outside Line Prefix field.
Enter the subaddress and telephone
number assigned to A/B Adapter 1/2
(PHONE1/2).
The Incoming Phone Number Matching setting governs how incoming calls are routed.
If you select Multiple Subscriber Number (MSN) or Called Party Subaddress, a call (either ISDN data or analog) is
routed to the port that matches the dialed number; if no match is found, the call is dropped. Global calls are always
ignored. A global call is an incoming analog call where the switch did not send the dialed number. This happens most
often when the call originates from an analog telephone line.
If you select Don’t Care, then all data calls are routed to the Prestige itself. Analog calls, however, are routed to either
A/B adapter 1 or 2, or simply ignored, depending on the Analog Call Routing field. If Incoming Phone Number
Matching is Don’t Care and Analog Call Routing is either A/B Adapter 1, A/B Adapter 2 or Both, then the Prestige
uses Global Analog Call to decide how to handle global calls. If you set Global Analog Call to Accept, then global
calls are routed to the port according to the Analog Call Routing setting; if you set Global Analog Call to Ignore, then
the Prestige ignores all global calls. If Analog Call Routing is Ignore to begin with, then all analog calls, including
global calls, are ignored.

Prestige 202H Plus Quick Start Guide
13
2. Click the Next button to continue. The second wizard screen helps you set up your Prestige for Internet access.
In the Service Name field, enter your
ISP’s name. Enter the Primary and the
Secondary Phone numbers to connect
to the ISP. Next, enter the user name
and password exactly as your ISP
assigned them.
Select Obtain an IP Address
Automatically if you have a dynamic IP
address; otherwise select Static IP
Address and type your ISP assigned IP
address in the text box below.
Choose the type of Network Address
Translation (NAT) you need. Select Full
Feature if you have multiple public
WAN IP addresses for your Prestige.
Select SUA Only if you have just one
public WAN IP address for your
Prestige. Select None to disable NAT.
When you select Full
Feature you must
configure at least one
address mapping set.
For more information
about NAT and the
choices listed refer to
your User's Guide.
In the Transfer Type drop-down list box, choose the type of connection between the router and this remote node. Select
64K, or Leased. If you selected 64K, select a PPP Multilink protocol.
In the Max Idle Timeout field, enter the amount of time (in seconds) after which you want the connection to timeout if
the line remains consistently idle.
3. Click Next to finish configuring the Prestige or Back to return to the previous screen. Verify the settings in the
screen shown next.

Prestige 202H Plus Quick Start Guide
14
4. To change the LAN information on the Prestige, click Change LAN Configuration. Otherwise click Save
Settings to save the configuration and skip to step 5.

Prestige 202H Plus Quick Start Guide
15
From the DHCP Server drop-down
list box, select On to allow your
Prestige to assign IP addresses, an
IP default gateway and DNS
servers to computer systems that
support the DHCP client. Select Off
to disable DHCP server.
When DHCP server is used, set the
following items:
Specify the first of the contiguous
addresses in the IP address pool in
the Client IP Pool Starting
Address field. Specify the size or
count of the IP address pool in the
Size of Client IP Pool field. Enter
the IP address(es) of the DNS
server(s) in the Primary DNS
Server and/or Secondary DNS
Server fields.
Enter the LAN IP address of your Prestige in dotted decimal notation in the LAN IP Address field. For example,
192.168.1.1 (factory default).
If you change the Prestige’s LAN IP address, you must use the new IP address if you want
to access the web configurator again.
Enter a subnet mask in dotted decimal notation in the LAN Subnet Mask field.
5. The Prestige automatically tests the connection to the computer(s) connected to the LAN ports. To test the WAN
connection from the Prestige to the ISP, click Start Diagnose. Otherwise click Return to Main Menu to go back
to the Site Map screen.

Prestige 202H Plus Quick Start Guide
16
4.4 Test Your Internet Connection
Launch your web browser and navigate to www.zyxel.com. You don’t need a dial-up program such as Dial Up
Networking. Internet access is just the beginning. Refer to the User’s Guide for more detailed information on the
complete range of Prestige features.
5 Advanced Configuration
This section shows how to configure some of the advanced features of the Prestige.
5.1 Network Address Translation Overview
NAT (Network Address Translation - NAT, RFC 1631) is the translation of the IP address of a host in a packet. For
example, the source address of an outgoing packet, used within one network is changed to a different IP address known
within another network.
If you have a single public IP address then select SUA Only in the NAT-Mode screen (see Figure 1). If you have
multiple public IP addresses then you may use full feature mapping types (see the User’s Guide for more details).
NAT supports five types of IP/port mapping. They are:
1. One-to-One: One-to-one mode maps one local IP address to one global IP address. Note that port numbers
do not change for One-to-one NAT mapping type.
2. Many-to-One: Many-to-One mode maps multiple local IP addresses to one global IP address.
3. Many-to-Many Overload: Many-to-Many Overload mode maps multiple local IP addresses to shared global
IP addresses.
4. Many-to-Many No Overload: Many-to-Many No Overload mode maps each local IP address to unique
global IP addresses.
5. Server: This type allows you to specify inside servers of different services behind the NAT to be accessible
to the outside world.
5.2 Configuring SUA Server
An SUA server set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you can make
visible to the outside world even though SUA makes your whole inside network appear as a single computer to the
outside world.
1. From the main screen click Advanced Setup and then NAT to open the NAT-Mode screen. Select SUA Only.

Prestige 202H Plus Quick Start Guide
17
Figure 1 NAT: Mode
2. Click Edit Details.
Figure 2 SUA/NAT Server
The following table describes the labels in this screen.

Prestige 202H Plus Quick Start Guide
18
Table 1 SUA/NAT Server
LABEL DESCRIPTION
Start Port No. Type a port number in this field. To forward only one port, type the port number again in the End Port
field. To forward a series of ports, type the start port number here and the end port number in the
End Port field.
End Port No. Type a port number in this field. To forward only one port, type the port number in the Start Port field
above and then type it again in this field. To forward a series of ports, type the last port number in a
series that begins with the port number in the Start Port field above.
IP Address Enter the inside IP address of the server here.
5.3 Firewall Overview
The Prestige firewall is a stateful inspection firewall and is designed to protect against Denial of Service attacks when
activated. The Prestige’s purpose is to allow a private Local Area Network (LAN) to be securely connected to the
Internet. The Prestige can be used to prevent theft, destruction and modification of data, as well as log events, which
may be important to the security of your network. The Prestige also has packet-filtering capabilities.
When activated, the firewall allows all traffic to the Internet that originates from the LAN, and blocks all traffic to the
LAN that originates from the Internet. In other words the Prestige will:
Allow all sessions originating from the LAN to the WAN
Deny all sessions originating from the WAN to the LAN
LAN-to-WAN rules are local network to Internet firewall rules. The default is to forward all traffic from your local
network to the Internet.
The following figure illustrates a Prestige firewall application.
Figure 3 Firewall Application

Prestige 202H Plus Quick Start Guide
19
5.4 Enabling the Firewall
From the main screen, click Advanced Setup, Firewall and then Config to open the Configuration screen. Enable (or
activate) the firewall by selecting the Enable Firewall check box as seen in the following screen.
Figure 4 Enabling the Firewall
5.5 Procedure for Configuring Firewall Rules
From the main screen, click Advanced Setup, Firewall and then Rule Summary (for either local network to Internet
rules or Internet to local network rules) to open the Summary screen.

Prestige 202H Plus Quick Start Guide
20
Figure 5 Rule Summary
The following table describes the labels in this screen.
Table 2 Rule Summary
LABEL DESCRIPTION
The default action
for packets not
matching following
rules
Should packets that do not match the following rules be blocked or forwarded? Make your choice
from the drop down list box. Note that “block” means the firewall silently discards the packet.
Default Permit Log Click this check box to log all matched rules in the Access Control List (ACL) default set.
The following read-only fields summarize the rules you have created that apply to traffic traveling in the selected packet
direction. The firewall rules that you configure (summarized below) take priority over the general firewall action settings
above.
No. This is your firewall rule number. The ordering of your rules is important as rules are applied in
turn. The Move field below allows you to reorder your rules.